Solution · Multi-agent pipelines
One orchestrator. Dozens of sub-agents. One accountability chain.
Sub-agent delegation extends the accountability chain one level down without requiring a separate human sign-off for every child. The full delegation chain is auditable end to end, and sub-agent scopes stay a strict subset of the parent's, which stays a subset of the operator's live IdP entitlements.
Who this is for
How it works
Delegation with a cryptographic paper trail.
Parent credentials, child scopes, cascade revocation: the entire chain is encoded in the credential and enforced automatically.
01
Mark the parent as delegation-enabled
Register the orchestrator with sub-agent delegation enabled. This is declared by the org at enrollment, not self-asserted by the agent.
02
Sub-agents register under the parent
Each child agent registers under its parent. Eniyan validates every spawn: a child can never exceed its parent's scopes or trust, and delegation depth is bounded.
03
Trust is capped and credentials are linked
A sub-agent's trust level cannot exceed the parent's. Every child credential is traceably linked to its parent, so downstream systems know the full delegation chain from the signed credential alone.
04
Cascade suspension enforced automatically
Every delegation notifies the operator the moment it happens. If the parent is suspended or retired, for any reason, all its sub-agents are cascade-suspended automatically. One revocation cleans up the whole tree.
Delegation chain
Human operator
Verified · Enhanced
authorizes
Orchestrator agent
Delegation enabled · Strong
delegates to
Search agent
web search · capped Strong
Code agent
code execution · capped Strong
Data agent
data read · capped Strong
Suspend the parent and all sub-agents suspend instantly
Built in
Compliance that scales with your pipeline depth.
Scope inheritance enforcement
Child agents can only operate within a strict subset of the parent's declared scopes. No privilege escalation. Enforced before the child ever runs.
Trust level capping
A sub-agent's trust level cannot exceed its parent's. A Strong parent means a Strong maximum for children, regardless of their own declaration completeness.
Delegation webhooks
Every delegation notifies the operator the moment it happens. Full visibility into when and what your orchestrators are spawning, in real time.
Cascade suspension
Suspend or retire the parent and the entire sub-agent tree is suspended automatically. One action to shut down a compromised pipeline, no manual child cleanup.